Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/61172F1E418511EF9434808A762E951A.roa
File: 61172F1E418511EF9434808A762E951A.roa (raw, json)
Hash identifier: Ggdy2BCCVkOV6udHqexxJa0QTcVk3iceO7BzU539+DQ=
Subject key identifier: 80:CC:F1:B0:21:21:30:F6:0A:8F:AF:22:DD:F2:34:A5:94:BE:D6:70
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9C2B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/61172F1E418511EF9434808A762E951A.roa
Signing time: Sun 14 Jul 2024 02:04:19 +0000
ROA not before: Sun 14 Jul 2024 02:04:15 +0000
ROA not after: Tue 13 Aug 2024 02:04:15 +0000
asID: 138915
IP address blocks: 156.244.15.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39979 (0x9c2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 14 02:04:15 2024 GMT
Not After : Aug 13 02:04:15 2024 GMT
Subject: CN=66933223-e9c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:10:e4:02:c5:40:41:99:0d:cc:d7:41:f2:9f:
9d:21:11:10:70:86:69:32:fc:af:4f:d3:02:87:cf:
73:f6:85:b7:e4:98:ce:51:df:30:dc:7d:a5:65:ea:
37:a4:fd:83:36:54:67:c6:7a:c7:c4:7a:f8:3e:3b:
a4:72:b9:30:f5:03:59:39:02:c6:2c:75:9c:6f:f9:
82:4b:72:4f:5a:6c:af:20:6c:6c:b4:e1:94:b6:7a:
f6:11:dc:7c:fb:eb:1a:26:49:23:30:ba:6d:ba:71:
2d:86:df:d3:de:25:68:e6:3e:e3:eb:a5:e3:e5:c3:
ab:63:b2:58:7a:ee:f8:ba:20:56:20:37:2d:ae:0d:
d7:ba:9a:41:2f:3f:1f:39:4c:92:4b:17:97:d8:bf:
7e:91:1a:d4:b5:59:8d:a3:4c:ad:a0:dc:2e:cc:73:
b6:52:fe:f7:15:02:bf:54:21:0b:bb:26:c8:7f:d2:
23:a0:e8:6e:0e:cd:0f:95:05:15:96:48:8c:06:02:
e6:27:12:e7:94:3a:9e:48:84:46:fc:85:43:10:0e:
4b:69:1c:c8:6b:75:68:87:3a:b4:e0:66:70:37:83:
0c:1e:cf:45:64:95:12:2e:ca:1c:e8:cc:c2:91:b5:
fd:e0:3d:01:97:6d:63:9c:19:d7:2b:ae:4b:6d:9e:
72:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:CC:F1:B0:21:21:30:F6:0A:8F:AF:22:DD:F2:34:A5:94:BE:D6:70
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/61172F1E418511EF9434808A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.15.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:a4:36:1a:c0:a9:77:b6:a1:9d:95:05:d2:e5:6e:f5:71:84:
a5:8a:00:ac:df:be:ef:94:6f:a7:c4:01:a2:e2:f6:26:3b:05:
8c:a4:64:4a:26:05:a0:8c:1c:56:b4:c9:cf:48:9e:ea:31:fd:
6b:3e:41:d1:fd:fe:17:25:85:20:50:db:35:95:d5:ac:d2:35:
7e:1d:c1:75:2c:4d:9a:e6:50:d7:06:94:f8:1d:3f:29:33:38:
cf:84:95:6f:fb:47:68:62:81:b8:88:03:61:9c:25:18:41:db:
3d:4e:83:db:e7:7a:e2:8c:64:f5:5b:f8:2c:aa:7d:f8:67:82:
cb:2b:76:8e:ae:d2:57:e6:65:d4:81:a0:a8:a4:fd:64:bf:65:
61:12:67:eb:e0:09:99:63:ca:96:18:63:06:bf:60:8a:72:64:
9c:9c:13:5d:37:9e:64:5c:7b:aa:27:56:3b:72:12:06:f2:03:
7d:6a:50:a1:8d:d3:2d:36:1d:c0:bf:f9:5c:70:2d:62:4e:12:
20:36:e4:51:95:b0:fe:f8:40:bc:1d:2b:7c:19:27:5b:9e:c8:
d7:ab:6f:ff:ac:6e:1b:96:33:f0:3f:24:69:45:7f:41:39:a1:
ea:ae:cf:a4:8c:35:45:1d:96:eb:1e:00:c5:c8:32:35:9c:d6:
40:38:f7:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 13 07:40:39 2024 by rpki-client on console-fra.rpki-client.org